New from 404 Media: inside a global phone spy tool that takes data from ads inside normal apps to monitor billions. Company removed videos while I was asking questions; we archived in the article. Google has now cut-off a connected company in response.
404media.co/inside-global-ph…
I did not know, but I guess I did imagine, that car manufacturers were intercepting and sharing text messages with law enforcement. Seems like a pretty terrible idea, unless there’s more to this story. therecord.media/class-action…
Earlier this year @AmnestyTech and @_clem1 from Google TAG found an in-the-wild iPhone zero day full chain. Today I’m publishing my analysis of the Safari sandbox escape component, the first in-the-wild sample to break into the new Safari GPU process.
.@_clem1 discovered another ITW 0-day in use by a commercial surveillance vendor: CVE-2023-5217. Thank you to Chrome for releasing a patch in TWO 🤯day!!
chromereleases.googleblog.co…
Who needs a 0-click when you have MITM? ✨ Working with @billmarczak & @citizenlab we discovered 3 iOS and 1 Chrome 0-day from Intellexa, used to install Predator spyware in Egypt 🇪🇬
blog.google/threat-analysis-…
🚨SCOOP: My new @Haaretzcom investigation reveals new Israeli cyber companies developed technology that exploits the heart of the online economy - ads - not just for mass surveillance, but also to hack phones 👇
haaretz.com/israel-news/2023…
New—hackers have access to a powerful chain of data that lets them dox nearly anyone in US for $15. With credit cards your address goes to the credit bureaus. That is then sold to companies, and the hackers tap into that. Targets include Musk, Rogan, Biden 404media.co/the-secret-weapo…
Need to access those precious encrypted kitten pics but you can't unlock your phone ? Don't worry, in this blog post @max_r_b and @DamianoMelotti will take you in a journey to the depths of #Android's file-based encryption so you know what to do.
blog.quarkslab.com/android-d…
ALT the cryptographic entrails of a modern Android phone
🚨 The Details given by you to the #Cowin portal can be accessed by anyone if they know your mobile number or Aadhaar. A telegram bot was sharing data including Name, Aadhaar/passport, Date of Birth, Gender, Vaccination centre etc. (1/n) #Manorama
A while back, I stumbled upon a file I consider the largest piece of evidence revealing how hundreds of data brokers trade personal data on everyone, including very sensitive data, globally.
Massive investigation by @themarkup and German @netzpolitik_org:
themarkup.org/privacy/2023/0…
India seems to be the new destination for “Hacking for hire” operatives. A lack of ethics and legal action allows these people to operate freely. I’m sure a lot of them are even hand in glove with the government.
newyorker.com/news/annals-of…
Hundreds of models of Gigabyte motherboards, used in gaming and other high-performance computers, have a backdoor in their firmware that invisibly downloads code to the machine at startup—and does so insecurely, leaving the feature open to abuse. wired.com/story/gigabyte-mot…
In which we describe one of our incident response engagements where five different actors were observed exploiting the same victim for completely different purposes. withsecure.com/en/expertise/…
☢️MSI leaked code signing certificate already abused by Threat Actors (expires in 2024).
I've collected 9 recently leaked certificates to cover up in upcoming Modern Initial Access training sessions🔥
bit.ly/456uq9u
👾 Already weaponised in Red Macros Factory 1.8!